Deploying ThreatLocker with the Stub Installer

2 min. readlast update: 08.02.2024

Download the Stub Installers

Stub Installers can be found on any page within the ThreatLocker portal, including:

  • The 'Install Computer' button on the Computers Page
  • The 'Download Installer' button on the Computer Groups Page
  • The 'Install Computer' button located on the top right of the portal

For more information about downloading stub installers, please see ThreatLocker Stub Installer | ThreatLocker Help Center (kb.help) 

Using the Stub Installers

The Stub Installer requires internet access to complete. It is the preferred method of deployment as it will always grab the latest stable version of ThreatLocker to install.

The Stub Installers can support the following switches:

  1. InstallKey
  2. Company
  3. GroupName
  4. Key
  5. Uninstall
  6. ProxyURL (can use either http or https, and can be used with or without a port #)
  7. ProxySettingURL (can use either http or https, and can be used with or without a port #)

To use the stub installers to install, you need to either provide the InstallKey for the group, or the Company, GroupName, and Key.

e.g. (With Group Install Key) ThreatLockerStubX64.exe InstallKey="xxxxxxxxxxxxxxxxxxxxxxxx"

e.g. (By Company and Group Names) ThreatLockerStubX64.exe Company="Acme" GroupName="Workstations" Key="xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxx"

e.g (With ProxyURL) ThreatLockerStubX64.exe ProxyURL="https://www.myproxyurl.com" or ProxyURL="https://www.myproxyurl.com:port#"

The Key is provided to you by ThreatLocker and can be found by navigating to the Computers page and selecting the "Install New Computer" button. The unique identifier is the Key required.

The Company and GroupName are matched to existing Organizations under your ThreatLocker account by name. If there isn't a match, ThreatLocker will create the Organization for you. By default, all Organizations have a "Workstations" and a "Servers" computer group.

When parsing the switches, do not use "/" or "-" before the switch.

The inputs after each switch should directly follow the "=" and be contained within the quotation marks "".

Difference between 'ProxyURL' and 'ProxySettingURL'

ProxyURL - This argument is used for the ThreatLocker Relay Service and should match the ThreatLocker Relay Server Settings set within your organization or group.

ProxySettingURL - This argument is used to specify a custom proxy configuration for the ThreatLockerStub and ThreatLocker Agent to use. The value for this argument should match the Computer Proxy Settings set within your organization or group.

You can learn more about configuring Computer Proxy Settings in the following KB:
Enabling a Proxy Server | ThreatLocker Help Center (kb.help)

Was this article helpful?